Location Privacy Selector

ABSTRACT

A wireless device capable of being located over a network by a requesting party comprises a phone, and a display to display a visually-continuous location privacy slider having at least five stops. Each of the at least five stops corresponds to a given combination of settings within the phone relating to a privacy of reporting of location of the wireless device to a requesting device.

BACKGROUND OF THE INVENTION

1. Field of the Invention

This invention relates generally to telecommunications, Voice Over Internet Protocol (VoIP), cellular communications, and location based systems. More particularly, it relates to security and privacy levels in wireless, mobile and telecommunications.

2. Background of the Related Art

The incorporation of tracking technology in today's handheld mobile devices has led to a vast emergence of location based services. These tracking technologies generally include a precise, satellite-enabled Global Positioning System (GPS), as well as cell tower positioning and network access points, among others, capable of delivering approximate location of a wireless device. Such tracking devices were initially deployed in mobile communications as a result of a 2002 US Federal Communications Commission (FCC) mandate to incorporate such technology in mobile devices in the event users need to be located throughout use of emergency services, such as in Enhanced 911 (E911).

Location based services enable user-permitted software applications on internet-enabled wireless devices. These wireless devices often encompass a particular tracking technology, most often the Global Positioning System (GPS). Location technologies are also and/or alternatively network based, e.g., Position Determining Entities (PDE).

Location based applications obtain a particular device's geographical position, and then provide services accordingly. Example location based services include standard navigation and emergency applications, as well as those attributed with business and entertainment. For instance, use of location based pull services allow users to locate other individuals or objects of interest. Businesses may use push services to send promotional information upon user consent, e.g., based upon a user's proximity to a particular site of interest.

As location based services become increasingly prevalent and useful, location services also begin to raise concern for user privacy. In fact, as more applications begin to track and record individuals' whereabouts, some people wonder whether or not true privacy is possible anymore. After all, all recorded data concerning a user's location is owned by the network to which the user subscribes.

To mitigate consumer concern, certain privacy measures have been enacted by the industry. For instance, a Location Privacy Checking Protocol (PCP) defines location privacy settings using five distinct states of privacy.

FIGS. 9-12 show the conventional use of visual “radio-button” type controls to communicate the five (5) different privacy states included in the Privacy Checking Protocol (PCP).

FIG. 9 depicts exemplary POSITION_NOT_ALLOWED 130 and POSITION_WITHOUT_NOTIFY 132 privacy profiles defined by the Privacy Checking Protocol (PCP).

In particular, FIG. 9 portrays two basic Privacy Checking Protocol (PCP) privacy options that may be set by the user, usually in a settings' menu, to either allow or disallow a location server to disclose the location of that user's wireless device to any requesting application. These options form POSITION_NOT_ALLOWED 130 and POSITION_WITHOUT_NOTIFY 132 privacy profiles. The POSITION_NOT_ALLOWED 130 privacy profile disallows location based services to be notified of the whereabouts of a user's wireless device altogether. On the other hand, the POSITION_WITHOUT_NOTIFY 132 privacy profile allows any location based application to receive knowledge of the geographical position of a user's wireless device, and also indicates that the user does not wish to be notified about the release of this location information.

FIG. 10 depicts an exemplary NOTIFY_POSITION 138 privacy profile defined by the Privacy Checking Protocol (PCP).

In particular, FIG. 10 builds upon the two basic Privacy Checking Protocol (PCP) privacy settings by taking them one step further, introducing a “Receive Notification” option. Use of the “Receive Notification” option introduces a NOTIFY_POSITION 138 privacy profile that allows the location of a user's wireless device to be disclosed as long as the user is notified that this exchange of information is taking place.

FIG. 11 depicts an exemplary NOTIFY_POSITION_IF_GRANTED 146 privacy profile defined by the Privacy Checking Protocol (PCP).

In particular, FIG. 11 introduces a Privacy Checking Protocol (PCP) “Require Authorization” privacy option. If a user checks the “Yes” radio button indicating that they would appreciate this service, a user must provide authorization before a location server may divulge the whereabouts of a particular wireless device. This leads to a new privacy profile, NOTIFY_POSITION_IF_GRANTED 146.

FIG. 12 depicts an exemplary NOTIFY_POSITION_IF_NO_RESPONSE 154 privacy profile defined by the Privacy Checking Protocol (PCP).

In particular, FIG. 12 indicates the addition of a Privacy Checking Protocol (PCP) “If No Response, Locate Anyway” privacy option. If a user selects the “Yes” radio button pertaining to this setting, then location information is sent to the appropriate location server in the absence of a user response to user authentication. This setting leads to yet another privacy profile, NOTIFY_POSITION_IF_NO_RESPONSE 156. On the other hand, if the “No” radio button is selected in accordance with this privacy option, then location information may only be disclosed by the location server if it is authorized to do so by the user. Therefore, the geographical position of a user's wireless device will not be revealed if that user fails to respond to an authorization message.

SUMMARY OF THE INVENTION

A wireless device capable of being located over a network by a requesting party comprises a phone, and a display to display a visually-continuous location privacy slider having at least five stops. Each of the at least five stops corresponds to a given combination of settings within the phone relating to a privacy of reporting of location of the wireless device to a requesting device.

In accordance with another aspect of the invention, a method of implementing a desired level of location privacy on a wireless device with a visually-continuous location privacy slide set to any of a plurality of stops each gradually increasing in location privacy respectively from one end to the other, comprises establishing a first combination of privacy settings among a plurality of applications operable on a wireless device when a lowest level of privacy is selected by a slide stopped at a first stop position at one end of a visually-continuous location privacy slide. A second combination of privacy settings is established among the plurality of applications operable on the wireless device when a central level of privacy is selected by the slide stopped at a central stop position of the visually-continuous location privacy slide. A third combination of privacy settings is established among the plurality of applications operable on the wireless device when a highest level of privacy is selected by a slide stopped at a last stop position at a second end of the visually-continuous location privacy slide.

BRIEF DESCRIPTION OF THE DRAWINGS

Features and advantages of the present invention will become apparent to those skilled in the art from the following description with reference to the drawings, in which:

FIG. 1 depicts an exemplary visually-continuous location privacy slider 300 with multiple distinct privacy stops, each gradually being more private in a position to the right and gradually being less private in a position to the left, in accordance with the principles of the present invention.

FIG. 2 denotes an exemplary five (5) location privacy stops as depicted in FIG. 1.

FIG. 3 denotes an exemplary POSITION_NOT_ALLOWED 128 privacy profile, e.g., at Level 5 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

FIG. 4 denotes an exemplary NOTIFY_POSITION_IF_GRANTED 126 privacy profile, e.g., at Level 4 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

FIG. 5 denotes an exemplary NOTIFY_POSITION_IF_NO_RESPONSE 124 privacy profile, e.g., at Level 3 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

FIG. 6 denotes an exemplary NOTIFY_POSITION 122 privacy profile, e.g., at Level 2 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

FIG. 7 denotes an exemplary POSITION_WITHOUT_NOTIFY 120 privacy profile, e.g., at Level 1 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

FIG. 8 depicts an exemplary visually-continuous location privacy slider 500 having many, many distinct number of stop positions, in accordance with the principles of the present invention.

FIG. 9 depicts exemplary POSITION_NOT_ALLOWED 130 and POSITION_WITHOUT_NOTIFY 132 privacy profiles defined by the Privacy Checking Protocol (PCP).

FIG. 10 depicts an exemplary NOTIFY_POSITION 138 privacy profile defined by the Privacy Checking Protocol (PCP).

FIG. 11 depicts an exemplary NOTIFY_POSITION_IF_GRANTED 146 privacy profile defined by the Privacy Checking Protocol (PCP).

FIG. 12 depicts an exemplary NOTIFY_POSITION_IF_NO_RESPONSE 154 privacy profile defined by the Privacy Checking Protocol (PCP).

DETAILED DESCRIPTION OF ILLUSTRATIVE EMBODIMENTS

The present invention provides a method of simplifying the user modification of privacy settings to a more exact and more easily achieved proper level of location disclosure a user is willing to reveal to requesting location based services. The method comprises a user friendly visually-continuous location privacy slider 300 that permits a user to choose one of multiple pre-determined settings, combinations, e.g., each setting corresponding to one level of the five (5) Privacy Checking Protocol (PCP) privacy settings that best fits their current needs. The visually-continuous location privacy slider 300 is preferably set up in order of ascending privacy levels. Users may simply graphically slide a visual pointer to the left to decrease their current level of privacy, or slide the visual pointer to the right to increase their level of privacy.

FIG. 1 depicts an exemplary visually-continuous location privacy slider 300 with multiple distinct privacy stops, each gradually being more private in a position to the right and gradually being less private in a position to the left, in accordance with the principles of the present invention.

The present inventors have appreciated that creating a separate visual representation for each state of privacy may be highly confusing and not as user friendly as possible. Moreover, many location-related applications may each have individual settings relating to privacy, leading to a logistical nightmare for a user as the number of such applications grows on a given wireless device. The inventors have appreciated that radio button-type control of privacy settings can make it very difficult for an end user to set their privacy permissions to a level which they desire. Furthermore, conventional button-type or on/off type visual representation often consumes too much display real estate on a user interface. Also, it has been discovered that display of too much privacy-related information on a handheld personal data assistant, smart phone, or the like is difficult to achieve due to the typically limited screen size.

The present invention provides a visually-continuous location privacy slider 300 that has many slide stops. The embodiments disclosed herein provide a visually-continuous location privacy slider 300 with, e.g., five (5) stops respectively corresponding to each of the five (5) defined levels in the Privacy Checking Protocol (PCP), but the principles of the invention are equally applicable to a visually-continuous location privacy slider 300 with many more than five (5) stops.

The multiple-stop singular visually-continuous location privacy slider 300 is a user interface element on a wireless device such as a smart phone or the like that permits a user to quickly and easily set their desired privacy relating to multiple different applications—and even without the need to fully understand the often complex logic associated with individual privacy settings often times separately adjusted in each of many location-based applications on their wireless device. The visually-continuous location privacy slider 300 preferably implements multiple setting standards, e.g., at a minimum the five (5) pre-defined privacy profiles defined by the Privacy Checking Protocol (PCP).

FIG. 1 shows a visually-continuous location privacy slider 300 with five (5) distinct stops to control different states of location privacy on a given wireless device. The visually-continuous location privacy slider 300 permits location settings to be configured easily, and in a timely fashion, without the need for a device user to read through various settings menus and select various different options relating to various aspects of their privacy, e.g., relating to their location, in each of a plurality of applications. The simplicity of the inventive visually-continuous location privacy slider 300 simplifies establishment of location based privacy settings in everyday mobile device usage. A wireless device may have its location privacy attributes quickly and simply altered as the situation changes, as need be.

FIG. 2 denotes the exemplary five (5) location privacy stops, 1-5, as depicted in FIG. 1.

In particular, the decision tree in FIG. 2 shows that if the slider is positioned at stop 1 corresponding to Level 1 on the visually-continuous location privacy slider 300, a POSITION_WITHOUT_NOTIFY 120 privacy profile is chosen, which is further depicted in FIG. 7.

If the slider of the visually-continuous location privacy slider 300 is set to the second stop, Level 2 corresponding to a NOTIFY_POSITION 122 privacy profile is chosen, which is further depicted in FIG. 6.

If the slider of the visually-continuous location privacy slider 300 is set to the third stop, Level 3 corresponding to a NOTIFY_POSITION_IF_NO_RESPONSE 124 privacy profile is implemented, which is further depicted in FIG. 5.

If the slider of the visually-continuous location privacy slider 300 is set to the fourth stop, Level 4 corresponding to a NOTIFY_POSITION_IF_GRANTED 126 privacy profile is implemented, which is further depicted in FIG. 4.

If the slider of the visually-continuous location privacy slider 300 is set to the fifth stop, Level 5 corresponding to a POSITION_NOT_ALLOWED 128 privacy profile is implemented, which is further depicted in FIG. 3.

FIG. 3 denotes the most-private selection, an exemplary POSITION_NOT_ALLOWED 128 privacy profile, e.g., at Level 5 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

In particular, the POSITION_NOT_ALLOWED 128 privacy setting, the fifth stop on the far right-hand side of the visually-continuous location privacy slider 300 shown in FIG. 3, turns off location detection 101 on the user's handheld device and consequently causes denial of all requests for information regarding the location of that user's wireless device.

FIG. 4 denotes the next-to-greatest private selection, an exemplary NOTIFY_POSITION_IF_GRANTED 126 privacy profile, e.g., at Level 4 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

In particular, the NOTIFY_POSITION_IF_GRANTED 126 privacy stop, e.g., a fourth stop on the visually-continuous location privacy slider 300 shown in FIG. 4, (though numbering need not be visually indicated to the user) permits location detection 102 and requires that a request for authorization 104 be sent to the user, and a “Yes” response be received in return, for wireless device location to be disclosed. In this case, a user receives notification 103 of the disclosure of that user's wireless device location. The NOTIFY_POSITION_IF_GRANTED 126 privacy setting does not make use of the “If No Response, Locate Anyway” privacy option. Thus, if no authorization response is received from the user, location of a user's wireless device may not be revealed.

FIG. 5 denotes an exemplary NOTIFY_POSITION_IF_NO_RESPONSE 124 privacy profile, e.g., at Level 3 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

In particular, the NOTIFY_POSITION_IF_NO_RESPONSE 124 privacy setting, the third stop on the visually-continuous location privacy slider 300 shown in FIG. 5 sends an authorization request 104 to the user when a location-based application requests knowledge of the current location of that user's wireless device. If the user fails to respond to the authorization request, the appropriate location server provides the location of that user's wireless device to any requesting applications.

FIG. 6 denotes the next-to-least private selection, an exemplary NOTIFY_POSITION 122 privacy profile, e.g., at Level 2 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

In particular, the NOTIFY_POSITION 122 privacy setting, the second stop on the visually-continuous location privacy slider 300 shown in FIG. 6, permits location detection 102 and sends a user notification 103 indicating information that the geographical location of that user's wireless device is being revealed, and the wireless device is immediately located.

The NOTIFY_POSITION 122 privacy profile does not make use of the “Require Authorization” privacy option indicating that location based services do not need to receive authorization from a user before receiving information about a wireless device's geographical position.

FIG. 7 denotes the least-private selection, an exemplary POSITION_WITHOUT_NOTIFY 120 privacy profile, e.g., at Level 1 on the visually-continuous location privacy slider 300, in accordance with the principles of the present invention.

In particular, the POSITION_WITHOUT_NOTIFY 120 privacy stop, numbered 1 on the far left-hand side of the visually-continuous location privacy slider 300 shown in FIG. 7, permits location detection 102 and allows location of a user's wireless device to be released without requiring notification and/or authorization of the event.

FIG. 8 depicts an exemplary visually-continuous location privacy slider 500 having many, many distinct number of stop positions, in accordance with the principles of the present invention.

In particular, as shown in FIG. 8, the present invention entails a visually-continuous location privacy slider 500 that encompasses many, many multiple distinct levels of privacy, as otherwise shown and described with reference to FIGS. 1-7. The visually-continuous location privacy slider 500 may be used to implement many, many multiple distinct stops such that it appears to the user that the visually-continuous location privacy slider 500 appears to have a virtually infinite number of gradually increasing levels and degrees of privacy. The level and degree of privacy established on the wireless device depends upon the position of the pointer on the visually-continuous location privacy slider 500.

Each position of privacy on a visually-continuous location privacy slider 500 that encompasses multiple distinct levels of privacy are associated with a particular numerical position value, e.g., 1 through n. The position of the pointer of the visually-continuous location privacy slider 500 determines the level of privacy to be set. Certain privacy settings are predetermined for particular numerical values, the higher the numerical position on the visually-continuous location privacy slider 500, the higher the privacy established on the wireless device. The numerical position is matched against pre-determined privacy settings to implement the desired privacy profile used.

For instance, if a user has chosen a maximum Location Privacy Level, e.g., Location Privacy Level n, then all privacy settings are set equal to true. On the contrary, if a user opts for the lowest possible Location Privacy Level, e.g., Location Privacy Level 1, all location privacy settings remain false. For levels of privacy between these two maximum and minimum outliers, a user's location privacy settings may depend upon the particular value, or range of values, of the numerical pointer on the visually-continuous location privacy slider 500.

The privacy settings may preferably be established upon exit from a menu display showing said visually-continuous location privacy slide, though it is also within the principles of the present invention to implement the selected pre-determined combination of privacy settings whenever a finger leaves a touch screen on the display after having set the slide.

The invention has particular applicability to location privacy in telecommunication and media markets.

While the invention has been described with reference to the exemplary embodiments thereof, those skilled in the art will be able to make various modifications to the described embodiments of the invention without departing from the true spirit and scope of the invention. 

1-9. (canceled)
 10. A wireless device locatable over a communication network, comprising: a display to display a location privacy selector having at least five stops; wherein each of said at least five stops corresponds to a given privacy setting for a wireless device associated with a privacy reporting of location information, said privacy setting including location information not allowed, location information given without notification, notify when location information given, notification of location information when location information request authorized, and location information given if no response to authorization request.
 11. A wireless device locatable over a communication network according to claim 10, wherein: said location privacy selector is a visually-continuous location privacy selector.
 12. A wireless device locatable over a communication network according to claim 10, further comprising: a phone.
 13. A wireless device locatable over a communication network according to claim 10, wherein: said location information is requested by a requesting party device.
 14. A wireless device locatable over a communication network according to claim 10, wherein: said at least five stops correspond to a given combination of settings for individual location functions defined by a Location Privacy Checking Protocol (PCP) standard.
 15. A wireless device locatable over a communication network according to claim 10, wherein: said communication network is a wireless network.
 16. A method of implementing a desired level of location privacy on a wireless device, comprising: establishing a first privacy setting for an application operable on a wireless device when a lowest level of privacy is selected by a location privacy selector corresponding to location information not allowed; establishing respective privacy settings for said application when central levels of privacy are selected by said location privacy selector corresponding to location information given without notification, notify when location information given, and notification of location information when location request authorized; and establishing a highest privacy setting for said application when a highest level of privacy is selected by said location privacy selector corresponding to location information given when no response to authorization request.
 17. A method of implementing a desired level of location privacy on a wireless device according to claim 16, wherein: said location privacy selector is a visually-continuous location privacy selector.
 18. A method of implementing a desired level of location privacy on a wireless device according to claim 16, wherein: said wireless device includes a phone.
 19. A method of implementing a desired level of location privacy on a wireless device according to claim 16, wherein: said location information is requested by a requesting party device.
 20. A method of implementing a desired level of location privacy on a wireless device according to claim 16, wherein: said location information is requested by a requesting party device.
 21. A method of implementing a desired level of location privacy on a wireless device according to claim 16, wherein: at least five stops corresponding to a given combination of settings for individual location functions defined by a Location Privacy Checking Protocol (PCP) standard.
 22. A method of implementing a desired level of location privacy on a wireless device according to claim 16, wherein: said location information of said wireless device is requested via a wireless network. 